Security audit and hardening for WordPress in plain language: a clear 0-100 score, what every finding means, and safe one-click fixes.
Keep track of your WordPress site's security and health by connecting it to Controla.
Protect your WordPress origin by requiring a secret request header and blocking direct access with Apache .htaccess rules.
Premium WordPress security with WAF, brute force block, URL obfuscation, malware scanning, and core reinstallation.
Free security check, one-click hardening and a login-code audit for WordPress. Add the managed edge to refuse attacks before they reach PHP.
A basic security plugin for WordPress 4.x, 5.0 or higher. You can selectively disable unused features in WordPress core...
Exposure scanner with a security score and basic WordPress hardening.
Twelve local hardening controls with an audit trail. No account, no telemetry, no third-party requests, nothing to configure elsewhere.
Scheduled security scanning (files/DB/config), baseline/integrity checks, safe quarantine & rollback, and hardening for WordPress.
Lightweight, safe-by-default WordPress security. Hardens your site without interfering with normal behaviour. Aggressive features are opt-in.
Selectively disable WordPress features to improve performance, security, and cleanliness. Toggle each feature individually from a single settings page.
Environment-aware security: firewall, malware & integrity scan, brute-force protection and 2FA — safety-first, with previews and rollback.
This plugin will check for a user named 'admin' and prompt the user to create a new account.
Requires 2FA for administrators, blocks new admin creation, refuses URL-credential logins, and emails you on admin logins. Locked to first admin.
The WeSecur plugin audits and protects your WordPress by daily analyzing malware, blacklists and vulnerabilities that can be exploited to infect your website and blocking attacks and spambots with tools specially designed to protect your WordPress.
Practical WordPress hardening with configurable security headers, CSP modes, login rate limiting, XML-RPC controls, and version hiding.
Scans your WordPress security and tells you what to fix. Connect an account for alerts on new vulnerabilities.
Comprehensive WordPress security auditor. Scans for vulnerabilities, misconfigurations and threats — scored report with actionable fix steps.
Security and upkeep with sensible defaults: login limits, two-factor login, hardening, plain-words checks, backups and updates with a backup first.